From 2cb1e5f8c546196e911827e5d33f3b686c3bf452 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Matthias=20Mail=C3=A4nder?= <matthias@mailaender.name>
Date: Mon, 20 Oct 2025 12:16:00 +0200
Subject: [PATCH] Allow unsigned builds in private forks.

---
 .github/workflows/packaging.yml | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/packaging.yml b/.github/workflows/packaging.yml
index 16164814e5..d8666b93cc 100644
--- a/.github/workflows/packaging.yml
+++ b/.github/workflows/packaging.yml
@@ -121,12 +121,14 @@ jobs:
 
       - name: Upload Installer
         id: unsigned-artifact
+        if: github.repository == 'openra/openra'
         uses: actions/upload-artifact@v5
         with:
           path: build/windows/*.exe
 
       - name: Microsoft Authenticode
         id: signpath
+        if: github.repository == 'openra/openra'
         uses: signpath/github-action-submit-signing-request@v2
         with:
           api-token: '${{ secrets.SIGNPATH_API_TOKEN }}'
@@ -144,5 +146,10 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         shell: bash
         run: |
-          gh release upload ${{ github.ref_name }} build/windows/*.zip
-          gh release upload ${{ github.ref_name }} build/windows/signed/*.exe
+          gh release upload "${{ github.ref_name }}" build/windows/*.zip
+
+          if [ "${GITHUB_REPOSITORY}" = "openra/openra" ]; then
+            gh release upload "${{ github.ref_name }}" build/windows/signed/*.exe
+          else
+            gh release upload "${{ github.ref_name }}" build/windows/*.exe
+          fi